Corrections¶
When a page we published turns out to be wrong or out of date, we fix it, put a dated note at the top of that page and list it here. Nothing is changed silently.
Last updated 11 November 2026
Two kinds of correction appear below. Source changed: Microsoft or another primary source changed a fact after we published, and our page still showed the old one. Our error: we got a fact wrong or left out something that mattered. Small fixes to wording, links or layout are not listed. Dated updates that add new facts (for example a vulnerability that is later exploited) are noted on the page itself and appear here only when the page had said the opposite. This list starts with the corrections of 3 November 2026.
| Corrected | Page | What it said | What it says now | Why |
|---|---|---|---|---|
| 11 Nov 2026 | Email & collaboration this week (31 October) | Teams malicious QR code detection rolls out from early November, finishing mid-November 2026 | From mid-November, finishing late November 2026 (MC1526651, updated 10 November 2026) | Source changed |
| 11 Nov 2026 | Outlook blocks MSIX attachments | Rollout begins early November and completes by mid-November 2026 | Begins early December and completes by mid-December 2026 (MC1488841, updated 10 November 2026) | Source changed |
| 11 Nov 2026 | Exchange OWA and mail flow hit by October Windows updates | Status "Mitigated"; no fix released; apply the registry workaround | Status "Resolved" by the Windows updates of 10 November 2026 (KB5131080, KB5131090, KB5131085, KB5131291); install them and the workaround is not needed | Source changed |
| 11 Nov 2026 | Email & collaboration this week (6 November) | Cross-tenant Calendar Sharing moves to Cross-Tenant Access Policy by 6 November 2026 | Worldwide expected completion 23 November 2026; Gov clouds paused (MC1446796 and the Exchange Team Blog, both updated 9 November 2026) | Source changed |
| 10 Nov 2026 | Threats & vulnerabilities this week (6 November) | Barracuda's advisory said nothing about exploitation of CVE-2026-116606 | Barracuda reports exploitation activity affecting a small number of organisations (advisory updated 9 November 2026) | Source changed |
| 10 Nov 2026 | Threats & vulnerabilities this week (6 November) | OpenSSH CVE-2026-123158 not in CISA KEV; no successful attack shown | In CISA KEV since 9 November 2026 (due 12 November); GreyNoise reports successful exploitation | Source changed |
| 7 Nov 2026 | Threats & vulnerabilities this week (6 November) | OpenSSH CVE-2026-123158: no attacks reported | Previdian reported exploitation attempts in the wild on 6 November 2026 | Source changed |
| 7 Nov 2026 | Email & collaboration this week (31 October) | Defender for Office 365 move to quarantine (MC1523084): GA from early November to mid-December 2026 | From late November 2026 to mid-January 2027 | Source changed |
| 5 Nov 2026 | Email & collaboration this week (31 October) | Teams suspicious guest invitation reports (MC1530615): GA from early November 2026 | From mid-November 2026 | Source changed |
| 4 Nov 2026 | Copilot Studio GPT-4.1 and GPT-5 retire 12 November | Two replacement models named as GPT-5.6 Terra and GPT-6 Sol | GPT-6 Luna and GPT-6.1 Sol, per the updated MC1506318 | Source changed |
| 4 Nov 2026 | .NET out-of-band Brotli security update | "We do not call it exploited"; only .NET listed as affected | In CISA KEV since 27 October 2026; PowerShell 7, Visual Studio and Azure Linux 3 also affected | Our error |
| 3 Nov 2026 | CISA KEV this week: Cisco ASA, GitLab, Ivanti, PHP | Run Ivanti's Integrity Checker Tool, with no caveat | A clean result does not rule out compromise for this exploit chain (Volexity); added log, /tmp/ and forensics checks | Our error |
Each corrected page carries a dated "Updated" note at the top saying what changed and, where it matters, what you should do differently. The dated rows on Microsoft 365 security deadlines and its calendar feed change on the same day.
Found something wrong? Tell us through any channel on the Follow page. How we source and check content: How we check every control.
Runbook Lab is not affiliated with Microsoft.